Technical Information
- %WINDIR%\Tasks\SA.DAT
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- '80.#1.22.89':445
- '80.##.195.227':445
- '80.##.224.136':445
- '80.##.169.64':445
- '80.##.36.206':445
- '80.##.203.16':445
- '80.#1.14.11':445
- '80.##.199.245':139
- '80.##.235.92':445
- '80.##.134.203':445
- '80.#1.54.83':445
- '80.##.225.65':445
- '80.##.244.224':445
- '80.##.242.101':445
- '80.##.154.85':445
- '80.##.213.154':445
- '80.#1.47.36':445
- '80.##.166.212':445
- '80.##.38.151':445
- '80.##.44.186':445
- '80.##.251.176':445
- '80.#1.96.78':445
- '80.##.213.65':445
- '80.##.64.213':445
- '80.##.132.207':445
- '80.##.220.173':445
- '80.##.197.13':445
- '80.##.139.65':445
- '80.##.186.169':139
- '80.##.75.207':139
- '80.##.33.174':139
- '80.##.107.28':445
- '80.##.177.49':445
- '80.##.132.207':139
- '80.##.213.65':139
- '80.##.197.13':139
- '80.##.234.60':139
- '80.##.220.173':139
- '80.##.64.213':139
- '80.##.199.245':445
- '80.##.234.60':445
- '80.##.177.49':139
- '80.##.139.65':139
- '80.##.107.28':139
- '80.##.110.181':445
- '80.##.38.151':139
- '80.##.169.64':139
- '80.##.166.212':139
- '80.#1.96.78':139
- '80.##.44.186':139
- '80.##.36.206':139
- '80.##.203.16':139
- '80.##.134.203':139
- '80.##.195.227':139
- '80.##.224.136':139
- '80.#1.22.89':139
- '80.##.110.181':139
- '80.##.154.85':139
- '80.#1.73.64':139
- '80.#1.58.82':139
- '80.##.244.72':139
- '80.##.213.154':139
- '80.#1.47.36':139
- '80.##.251.176':139
- '80.##.244.224':139
- '80.##.242.101':139
- '80.##.225.65':139
- '80.##.163.15':445
- '80.##.201.90':445
- '80.##.227.237':445
- '80.#1.41.64':445
- '80.##.61.175':445
- '80.##.174.236':445
- '80.##.244.72':445
- '80.#1.73.64':445
- '80.#1.58.82':445
- '80.##.44.183':445
- '80.#1.98.45':445
- '80.##.163.31':445
- '80.##.182.128':445
- '80.#1.14.11':139
- '80.#1.54.83':139
- '80.##.235.92':139
- '80.#1.24.9':445
- '80.##.153.116':445
- '80.#1.53.81':445
- '80.##.156.199':445
- '80.##.197.23':445
- '80.##.214.84':445
- '80.##.130.210':445
- '80.#1.16.63':445
- '80.##.251.192':445
- '80.##.219.27':445
- '80.#1.61.21':445
- '80.##.179.157':445
- '80.##.62.149':445
- '80.#1.50.3':445
- '80.#1.81.1':445
- '80.##.60.118':445
- '80.##.108.64':445
- '80.##.37.249':445
- '80.#1.98.92':445
- '80.#1.24.63':445
- '80.##.18.167':445
- '80.##.171.153':445
- '80.##.205.238':445
- '80.##.128.180':445
- '80.#1.31.50':445
- '80.##.94.188':445
- '80.##.14.202':445
- '80.##.47.219':445
- '80.##.197.135':139
- '80.##.89.197':139
- '80.##.135.196':139
- '80.##.244.27':445
- '80.##.196.243':139
- '80.##.175.89':139
- '80.##.98.180':139
- '80.##.119.148':139
- '80.##.147.189':139
- '80.##.163.26':139
- '80.##.69.176':139
- '80.#1.31.59':445
- '80.##.174.150':445
- '80.##.48.214':445
- '80.##.231.49':445
- '80.#1.82.23':445
- '80.##.155.155':445
- '80.#1.192.7':445
- '80.#1.50.36':445
- '80.##.196.235':445
- '80.#1.22.52':445
- '80.#1.93.11':445
- '80.##.166.214':445
- '80.#1.31.50':139
- '80.##.219.27':139
- '80.##.128.180':139
- '80.##.47.219':139
- '80.##.94.188':139
- '80.#1.61.21':139
- '80.##.179.157':139
- '80.##.60.118':139
- '80.#1.16.63':139
- '80.##.251.192':139
- '80.##.130.210':139
- '80.##.166.214':139
- '80.##.18.167':139
- '80.#1.7.41':139
- '80.##.159.40':139
- '80.##.28.173':139
- '80.##.171.153':139
- '80.##.205.238':139
- '80.##.14.202':139
- '80.#1.98.92':139
- '80.#1.24.63':139
- '80.##.37.249':139
- '80.#1.50.36':139
- '80.##.244.27':139
- '80.#1.192.7':139
- '80.#1.93.11':139
- '80.##.196.235':139
- '80.##.33.174':445
- '80.##.28.173':445
- '80.#1.7.41':445
- '80.##.159.40':445
- '80.##.186.169':445
- '80.##.75.207':445
- '80.#1.50.3':139
- '80.##.231.49':139
- '80.##.62.149':139
- '80.##.108.64':139
- '80.#1.81.1':139
- '80.#1.82.23':139
- '80.##.155.155':139
- '80.#1.22.52':139
- '80.##.174.150':139
- '80.##.48.214':139
- '80.#1.31.59':139
- '80.##.169.110':445
- '80.##.159.108':445
- '80.##.132.168':445
- '80.#1.62.32':445
- '80.##.76.133':445
- '80.##.246.130':445
- '80.##.100.144':445
- '80.#1.2.73':445
- '80.##.164.188':445
- '80.#1.87.69':445
- '80.#1.0.44':445
- '80.##.115.62':139
- '80.##.105.210':139
- '80.##.62.153':139
- '80.#1.24.39':139
- '80.##.153.12':139
- '80.##.73.177':139
- '80.##.153.204':445
- '80.##.254.20':445
- '80.##.65.108':445
- '80.##.148.38':445
- '80.##.157.197':445
- '80.##.183.218':445
- '80.##.160.99':445
- '80.##.105.34':445
- '80.##.134.94':445
- '80.#1.77.22':445
- '80.##.120.160':445
- '80.#1.5.25':445
- '80.#1.13.5':445
- '80.##.38.128':445
- '80.#1.57.38':445
- '80.##.110.63':445
- '80.##.150.136':445
- '80.##.205.81':445
- '80.#1.163.0':445
- '80.##.145.199':445
- '80.##.100.87':445
- '80.##.122.70':445
- '80.#1.64.81':445
- '80.##.78.141':445
- '80.##.214.249':445
- '80.#1.8.218':445
- '80.##.226.20':445
- '80.##.57.196':139
- '80.##.100.144':139
- '80.#1.2.73':139
- '80.##.164.188':139
- '80.#1.87.69':139
- '80.#1.0.44':139
- '80.##.145.199':139
- '80.##.205.81':139
- '80.##.122.70':139
- '80.##.150.136':139
- '80.##.100.87':139
- '80.#1.163.0':139
- '80.##.148.38':139
- '80.##.65.108':139
- '80.##.254.20':139
- '80.##.157.197':139
- '80.##.153.204':139
- '80.#1.62.32':139
- '80.##.159.108':139
- '80.##.246.130':139
- '80.##.169.110':139
- '80.##.76.133':139
- '80.##.132.168':139
- '80.#1.5.25':139
- '80.#1.13.5':139
- '80.##.38.128':139
- '80.#1.57.38':139
- '80.##.110.63':139
- '80.##.111.50':139
- '80.##.134.125':139
- '80.##.94.177':139
- '80.##.134.109':139
- '80.##.150.182':139
- '80.##.102.179':139
- '80.#1.64.81':139
- '80.##.78.141':139
- '80.##.214.249':139
- '80.#1.8.218':139
- '80.##.226.20':139
- '80.##.134.94':139
- '80.##.160.99':139
- '80.##.120.160':139
- '80.##.183.218':139
- '80.#1.77.22':139
- '80.##.105.34':139
- '80.##.80.245':139
- '80.##.24.237':139
- '80.##.10.188':139
- '80.##.131.99':139
- '80.##.209.22':139
- '80.#1.153.2':139
- '80.##.168.181':445
- '80.##.131.99':445
- '80.##.251.128':445
- '80.##.125.126':139
- '80.##.70.248':445
- '80.##.184.50':445
- '80.##.82.184':445
- '80.##.50.250':445
- '80.##.218.47':445
- '80.##.250.231':445
- '80.##.148.30':445
- '80.##.251.128':139
- '80.##.168.181':139
- '80.##.70.248':139
- '80.##.119.16':445
- '80.##.49.177':445
- '80.#1.41.64':139
- '80.##.61.175':139
- '80.#1.53.81':139
- '80.##.156.199':139
- '80.##.153.116':139
- '80.##.227.237':139
- '80.##.44.183':139
- '80.#1.98.45':139
- '80.##.174.236':139
- '80.##.163.15':139
- '80.##.201.90':139
- '80.##.24.237':445
- '80.#1.153.2':445
- '80.##.80.245':445
- '80.##.209.22':445
- '80.##.10.188':445
- '80.##.125.126':445
- '80.##.197.23':139
- '80.##.214.84':139
- '80.#1.24.9':139
- '80.##.163.31':139
- '80.##.182.128':139
- '80.##.178.106':445
- '80.##.254.20':9988
- '80.##.157.197':9988
- '80.##.153.204':9988
- '80.##.105.210':445
- '80.##.73.177':445
- '80.#1.163.0':9988
- '80.#1.2.73':9988
- '80.##.76.133':9988
- '80.##.169.110':9988
- '80.##.205.81':9988
- '80.##.159.108':9988
- '80.##.134.109':445
- '80.##.134.125':445
- '80.##.102.179':445
- '80.##.111.50':445
- '80.##.150.182':445
- '80.##.94.177':445
- '80.##.62.153':445
- '80.##.115.62':445
- '80.##.153.12':445
- '80.##.57.196':445
- '80.#1.24.39':445
- '80.##.82.184':139
- '80.##.148.30':139
- '80.##.184.50':139
- '80.##.250.231':139
- '80.##.50.250':139
- '80.##.119.16':139
- '80.##.34.106':445
- '80.##.25.115':445
- '80.##.174.40':445
- '80.##.49.177':139
- '80.##.248.40':445
- '80.##.246.130':9988
- '80.#1.0.44':9988
- '80.##.226.20':9988
- '80.##.100.144':9988
- '80.##.122.70':9988
- '80.##.248.40':139
- '80.##.178.106':139
- '80.##.218.47':139
- '80.##.25.115':139
- '80.##.174.40':139
- '80.##.34.106':139